HILBERT'S IRREDUCIBILITY THEOREM AND THE LARGER SIEVE 
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Abstract. We describe an explicit version of Hilbert's irreducibility theorem using a generalization of 
Gallagher's larger sieve. We give applications to the Galois theory of random polynomials, and to the 
images of the adelic representation associated to elliptic curves varying in rational families. 



1. Introduction 

In this paper, we are interested in quantitative versions of Hilbert's irreducibility theorem (HIT). In §1.1, 
we will review the classical description of HIT in terms of polynomials and give a special case of our new 
bounds in this setting (our most general bound can be found in §2.2). As an illustration of these bounds, 
we then study the fundamental example of HIT in §1.2, i.e., the Galois group of a "random" polynomial of 
degree n. 

A more serious application is given in §1.3 where we discuss the Galois representations associated to the 
division points of an elliptic curve. We shall start with a model of a non-isotrivial elliptic curve E over a 
field K = k(Ti, . . . ,T„) where k is a number field and the Tj are independent variables. Associated to E, 
there is a Galois representation pe ■ Gal(K / K) — > GL 2 (Z) describing the Galois action on the torsion points 
of E(K). For most n-tuples t = (ti, . . . ,t n ) £ k n , we obtain an elliptic curve Et over k by specializing each 
Ti with ti. For a "random" t G k n , we will describe the image of the corresponding Galois representation 
PE t ■ Gal(fc/fc) — > GLi2(Z). For k ^ Q, we will see that pE t (Gal(k/k)) agrees with the image of pe for most 
t G k n . The case k = Q is subtler, and we will see that pE t (Gal(Q/Q)) is usually a subgroup of index r in 
Pe{K / K) where r is a certain positive integer depending on E. 

1.1. Hilbert's irreducibility theorem. Let k be a number field with a fixed algebraic closure k. Fix a 
monic irreducible polynomial f(x, Ti, . . . , T n ) G fc(Ti, . . . , T n )[x] in the variable x. To ease notation slightly, 
we will denote the n-tuple of independent variables (Ti,...,T n ) by T. Let L be the splitting field of 
f(x,T) G k(T)[x] in a fixed algebraic closure k(T). Denote the Galois group Gal(L/fc(T)) by G. 

Now let 0/ be the set of t G k n for which some coefficient of f(x,T) has a pole at T = t, or for which 
f{x,t) is not separable. For each G k n — {If, let L t be the splitting field of f(x,t) G k[x] in k and define 
Gt = Gel{L t /k). Specialization induces an inclusion Gt C G which is uniquely determined up to conjugation. 
We then have the following: 

Theorem 1.1 (Hilbert's irreducibility theorem). For "most'' points te P-flj, we have Gt = G. 

Of course one needs to make the "most" condition precise. In this paper, we shall interpret this in terms 
of natural density. Let H be the absolute (multiplicative) height on P™(fc), see [HSOO, §B.2] for background. 
For example, if xo, . . . ,x n belong to Z and satisfy gcd(xo, . . . , x n ) = 1, then H([xq, • • • , x n ]) = max^ \xi\. 
We shall also view H as a function on k n = A n (k) by using the open embedding AJ! — > P£, [x\, . . . , x n ) >->■ 
[xi, ■ • ■ , x n , 1]. For any real number B > 1, there are only finitely many t G k n with H (t) < B. 

A precise formulation of Theorem 1.1 is then the following 

\{tek n -n f :H(t)<B, G t = G}\ , 
hm — — = 1. 

s^+oo \{t G k n : H(t) < B}\ 

Intuitively, this says that if we write down large "random" ti,...,t n G k, then almost surely the splitting 
field of the polynomial f(x,t) over k has Galois group G. As a consequence we find that f(x,t) G k[x] is 
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irreducible for "most" t 6 k n . Another possible notion of "most" is that the theorem holds for all t outside 
a thin subset of k n (see [Ser97, §9] or [Ser08, §3] for details). 

We will also want to consider integral versions of HIT, let Ok be the ring of integers of k. For t = 
(ti,...,t n ) G 0%, define \\t\\ = m&x a ^\cr(ti)\ where a runs over the field cmbcddings a: k C. The 
following theorem, which is a consequence of the large sieve, gives essentially the best general upper bound 
available. For reference, we note that there are positive constants c n ^ and c' n k such that 

(1.1) \{t e Ol : \t\ < B}\ ~ c ritk B [k '- Q]n and \{t G k n : H(t) < B}\ ~ c' n>k B^ {n+1 ^ 
as B — > +oo. 

Theorem 1.2 (Cohen, Serre). With notation as above, 

\{t eOZ-tof- 1*1 < B, G t + G}\ £^W«-i/2) logB and 

\{t 6 k n - n f : F(t) < B, G t ? G}\ £^W«+i/2) logB. 

This follows from Theorems 1 and 2 of [Ser97, §13] (where log-B can be actually be replaced with (log£>) A 
for some A < 1). The integral version with a more explicit constant can be found in [Coh79]. Here is an 
equivalent version of Theorem 1.2: 

Theorem 1.3. With notation as above, let C be a proper subset of G that is stable under conjugation. Then 

\{t e oi - n f : \\t\\ <B,G t <z c}\ B [km{n-im logB and 

\{t 6 k n - 0/ : H(t) <B,G t Q C}\ B ^ n+1 ^ logfl. 

Theorem 1.3 follows directly from Theorem 1.2. Let us explain the other implication; we consider only 
the integral case. If Gt ^ G, then it must lie in some maximal subgroup M of G. Since our Gt is only 
uniquely defined up to conjugation, it is less ambiguous to write G t C |J ggG gMg~ l . So we have 

(1.2) \{t G 01 - n f : ||i|| < B, G t + G}\ < J2 \{t e O n k - il f : ||t|| < B, G t C (J .gA/.g- 1 } 

M 9 6G 

where the sum is over representatives of the conjugacy classes of maximal subgroups of G. Define S(G, M) := 
U 9 eG 9^-9~ 1 \/\^\- Jordan's lemma [Ser03], we know that \J ge( j gMg is a proper subset of G (equiv- 
alently 5(G, M) < 1). Applying the bound of Theorem 1.3 to the right hand side of (1.2) gives 

\{t G Ol - Sl f : < B, G t + G}\ < n ,f,kJ2 B[kmn ~ y2) lo % B - 

M 

We obtain Theorem 1.2 by noting that the number of representatives M of maximal subgroups is O n (l). 

Our main abstract result is the following general bound which beats the large sieve when |C|/|G| < 1/2. 
Its proof utilizes an extension of Gallagher's larger sieve. We will state a more general version of this theorem 
in §2.2 that removes the assumption that L/k(T) is geometric (i.e., L fl k = k) and gives better control over 
the implicit constant. 

Theorem 1.4. Assume that L/k(T) is geometric and let C be a subset of G that is stable under conjugation. 
Then 

\{t G Ol - Ct f : < B, G t C G}| <„ ;/ , fc B[ fc: QK»-i+|C|/|G|) log £ and 
\{t G k n - fl f : H(t) <B,G t Q C}\ <„ i/)A . S^Q](«+|C|/|G|) logB 
Arguing as before, Theorem 1.4 implies that 

(1.3) \{a G O n k - n f : \\t\\ <B,G t ^ G}| < nJ , k B ^Q](n~i+S(G)) hgB 

where 5(G) is the maximum of the S(G, M) over all maximal subgroups M of G. The bound (1.3) is superior 
to that of the large sieve if 6(G) < 1/2. Unfortunately 5(G) > 1/2 for many interesting groups (an example 
where (1.3) is superior is when G is a p-group with odd p, since one has 5(G) = l/p). 

As we will see in the next section, the larger sieve can be used to deal with the small maximal subgroups 
M of G, that is, small in the sense of the quantity 5(G, M). This leaves the larger maximal subgroups to be 
studied using alternate methods. 
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1.2. The Galois group of a random polynomial. We now consider the fundamental example of Hilbert's 
irreducibility theorem. Fix a positive integer n. For T — (Ti, . . . , T n ), define the polynomial 

/(x, T) = x n + Txx"- 1 + • ■ • + T n _ lX + T n . 

For i £ Z", let Gt be the Galois group of the splitting field of /(x, f) over Q. By numbering the roots of 
S(x,t), we may view G t as a subgroup of 5 n . Hilbert's irreducibility theorem says that G t = S„ for "most" 
choices of t G Z n . 

We now consider a quantitative version. Define the following counting function 

E n {B) := |0 G Z" : \\t\\ <B,G t ^ S n }\ 

(recall that = max^ \U\). We will restrict ourselves to n > 3, since n = 1 is uninteresting and it is known 
that E 2 (B) ~ 2BlogB. 

In 1936, van der Waerden [vdW36] gave the explicit bound 

E n (B) <„ S n "i°siogfi with C : 



6(n-2)' 

and further conjectured that \E n {B)\ <C„ i? n_1 for n > 2. Van der Waerdan's conjecture is best possible 
since the polynomials /(x, ii, . . . , t n -i, 0) are always reducible and hence |.E n (.B)| ;§> J5 ra_1 . 
In 1956, Knobloch [Kno56] gave the improved bound 

E n {B) <C n S"- c " with c 



18n(n!) 3 ' 

In 1973, Gallagher [Gal73] used a higher dimensional large sieve to give the bound 

(1.4) E n {B) «„ ^-^(logS) 1 " 7 " 

where {7„} is a sequence of positive numbers with 7„ ~ (27m) -1 / 2 . This power of the log-B can be further 
improved, but the large sieve is incapable of lowering the power of B that occurs. 

There has been some progress for small n. For any e > 0, one has E${B) <S e B 2+e and E±(B) <^. £ B 3+e 
(this is due to Lofton [Lcf79] and Dictmann [Dic06], respectively). We have the following modest improvement 
for large n. 

Proposition 1.5. For all n sufficiently large, we have 

E n (B) < n B n -i. 

If instead we count those t G Z" for which Gt is neither S n nor the alternating group A n , then we have 
the following significantly stronger bound. 

Theorem 1.6. For every e > there is an N such that 

(1.5) \{a G Z" : |t| <B,G t ^ S n and G t ^ A n }\ <„ 
/or aiZ n > N. 

Remark 1.7. It should be noted that the condition "Gt ^ S n and Gt ^ A n " does show up in practice. For 
example, let f(x) G Z[x] be a separable polynomial of degree n > 5 and let Cf be the hyperelliptic curve 
with affine model y 2 = /(x). Let J(Cf) be the Jacobian of C/; it is an abelian variety over Q of dimension 
2[(n - 1)/2J. Zarhin [ZarOO] has shown that if Gal(/) = A n or Gal(/) = S n , then End( J(C/)q) = Z. 
Theorem 1.6 thus gives an upper bound on the number of t G Z™ with ||t|| < B for which f(x,t) is not 
separable or End(J(Cf( x j))Q) ^ Z. 

Remark 1.8. R. Dietmann [DiclO] has recently given a proof of Theorem 1.6 that gives superior bounds than 
ours. In particular, he proves that \{a G Z n : ||t|| < B,G t ^ S n and G t ^ A n }| < n , e wne re 
e(n) is the middle binomial coefficient (^„™ 2 j)' Dietmann's techniques are not sieve theoretic; he uses Galois 
resolvents to reduce the question to counting integral points on certain varieties. 
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The first thing to note is that Theorem 1.4 by itself does not lead to an improved bound for E n (B). Let 
Mi be the maximal subgroup of S„ that stabilizes the letter 1. Since S(S n , Mi) = 1 — Y^ii=o(~ 1)*A' (this is 
just the proportion of elements in S n that are not derangements) we find that limsup,,^^ 5{S n ) > 1 — e -1 , 
and in fact equality holds. Equation (1.3) would then give the inferior bound E n (B) <C n B n ~ e 

Instead we shall treat Mi separately. Note that Gt C U g eG if an d onr y if f{ x ^) has a root in Z. 

The following theorem bounds the number oft with f(x,t) reducible. 

Theorem 1.9 (van der Waerden [vdW36]). For an integer 1 < i < n/2, we have 

' ' B n ~ l ifi<n/2, 



\{t G Z" : \\t\\ < B, f(x, t) is reducible with a factor of degree i}\ <C r 



B n ~ l log B ifi = n/2. 



Remark 1.10. Using van der Wacrdan's theorem and counting those t for which /(x, t) has a root in Z, Chela 
[Chc63] showed that 

\{t G Z" : ||i|| < 5, f(x,t) is reducible}| - c^™ -1 
as B — > +oo, where c n > is an explicit constant. 

Using this theorem we now need only consider those t for which f{x,t) is irreducible; in other words, 
those t for which Gt is a transitive subgroup of S n . Let M. n be the set of transitive subgroups of S n that 
are neither A n or S n . The following theorem of Luczak and Pybcr shows that few elements of S n belong to 
any of the M G M„. 

Theorem 1.11 (Luczak-Pyber [LP97]). We have lim ^ M f^ M \ = Q 

n^oo \S n \ 

Proof of Theorem 1.6. From Theorem 1.9, we know that 

(1.6) \{t e Z n : ||t|| < B, G t is a non-transitive subgroup of S„}\ <„ B' n ~ l . 

By Theorem 1.11 there exists an N such that | {Jm^m^ M\/\S n \ < e for all n > N. Applying Theorem 1.4 
with C = {J M eM n M § ives 

(1.7) |{t G Z" : \t\ <B,G a E M n }\ <„ B n ~ 1+£ 

for all n > N. Theorem 1.6 follows by combining (1.6) and (1.7). □ 

Thus to improve on Gallagher's bound, at least for n large enough, it suffices to bound the function 

E' n {T) = \{t G Z" : ||t|| < B, G t CA„}|. 

Equivalently, bound the number of t G Z" with \\t\\ < B for which A(ti, . . . ,t n ) is a square, where 
A(Ti, . . . , T„) G k[Ti, . . . , T n ] is the discriminant of x n + T Y x n - 1 + • • • + T„_ix + T n . Using the large 
sieve one can show that E' n (T) <C„ £?" -1 / 2 which completes the proof of Proposition 1.5. 

Remark 1.12. In the final comments of [LP97], the authors claim that | [Jmgm M\/\S n \ = 0(n~ a ) for some 
absolute constant a > 0. This would imply the following strengthening of (1.5): 

|{t G Z" : \\t\\ <B,G t ^ S n and G t ^ A n }\ «„ B n - 1+ °^\ 

We should also point out that an analogue of Theorem 1.11 has recently been proven for almost simple 
Chevalley group over ¥ q where the rank is fixed and q — > oo [FG09] . 

1.3. Galois actions on the torsion points of elliptic curves. 

1.3.1. Serre's open image theorem. Consider an elliptic curve E defined over a field K. For each positive 
integer m relatively prime to the characteristic of K, let E[m) be the m-torsion subgroup of E(K). The 
group E[m] is non-canonically isomorphic to (Z/mZ) 2 and has a natural Gal(A'/A')-action which can be 
expressed in terms of a Galois representation 

p E ,m ■ Gal(A/A) Aut(AH) = GL 2 (Z/mZ). 

If K has characteristic 0, then combining these representations together we obtain a single Galois represen- 
tation 

P E- Gal(A/A) — » GL 2 (Z) 



which describes the Galois action on all the torsion points of E (where Z is the profinite completion of Z) . 
The main result for these representations over number fields is the following important theorem of Scrre 
[Ser72]. 

Theorem 1.13 (Serre). Let k be a number field and let E be an elliptic curve over k without complex 
multiplication. Then pg(Gal(fc/fc)) is a finite index subgroup o/GL 2 (Z). 

1.3.2. Families of elliptic curves. Fix a number field k, an integer n > 1, and define the field K := 
k(T\, . . . , T„) = k(T). Let E be an elliptic curve over the function field K , and assume that the j-invariant 
of E does not belong to k. Now choose a model for E/K, say, a short Weierstrass model 

y 2 = x 3 +a(T)x + b(T). 

Let fi be the set of t G k n for which a(T) and b(T) have a pole at T = t or for which the discriminant of the 
Weierstrass equation is zero at T = t. Then for each t G k n — ft, the curve Et obtained by replacing T with 
t in our model, i.e., y 2 = x 3 + a(t)x + b(t), is an elliptic curve over k. Our goal is to understand how the 
images of pE t vary with t G k n — fi, and in particular to describe the image for "most" t in terms of E/K . 

For each integer m > 1, we define the group H_E(m) = /9£, m (Gal(if /if)). Specialization by t G fc" — 
gives an inclusion pE t .m{Gal(k/k)) C HE(m) that is determined up to conjugation. We may thus view 
PE t (Gal(fc/fc)) as a subgroup of He '■= pe{G'a\{K / K)) which again is uniquely determined up to conjugation. 
Hilbcrt's irreducibility theorem implies that PE t ,m{Gal(k/k)) = HE{m) for "most" t (where m is fixed). It 
also suggests that pE t (Gal(fc/fc)) = He holds for most t. 

Theorem 1.14. Suppose that k ^ Q. Then 

\{t G fc" - n : H{t) < B, PEt (Gal(k/k)) = H E }\ 
\{t G fc" : H{t) < B}\ 
\{t G O'l - n : \\t\\ < B, p Et {G&\(k/k))=U E }\ 
\{t G Ol : \t\ < B}\ 

where the implicit constants do not depend on B. 

First observe that the choice of model is not important for this theorem. The specializations of any two 
models will agree away from some closed subvariety Z C A£, and the fc-rational points of Z have density 
zero in fc". 

Secondly, it is important to note that Theorem 1.14 is not a direct consequence of HIT (since He is an 
infinite group). This is well illustrated by the fact that Theorem 1.14 can fail when fc = Q. 



= I + 0(B- 1/2 log B) and 
= 1 + 0(B- 1/2 logS) 



Let us describe why we excluded fc = Q. Recall that for a profinite group H, the commutator subgroup 
[H, H] is the smallest closed normal subgroup of H for which H/ [H, H] is abelian. 

Fix a t G Q n -Q., and suppose that p Et (Gal(Q/Q)) = He- The homomorphism det op Et : Gal(Q/Q) -)■ Z x 
is the cyclotomic character. Therefore, pE t (Gal(Q/Q cyc )) = He n SL 2 (Z) where Q cyc is the cyclotomic 
extension of Q. Let Q ab be the maximal abelian extension of Q. The commutator subgroup of pE t (Gal(Q/Q)) 
is PBf (Gal(Q/Q ab )), so p Bt (Gal(Q/Q ab )) = [H E ,% E ]. 

The Kronecker- Weber theorem says that Q cyc = Q ab , so an equality pE t (Gal(Q/Q)) = He would imply 
that [He, He] = He H SL2(Z). This relation need not hold though! For example, with He = GL2(Z), the 
group [GL2(Z), GL 2 (Z)] has index 2 in SL 2 (Z). Our main result for fc = Q is the following. 

Theorem 1.15. Suppose that k = Q. Let r be the index of [He, He] in He H SL 2 (Z). Then for any e > 0, 
\{teQ n -Q: H(t) <B, [He'-PeJ 



\{t G Q n : H(t) < B}\ 



0{B~ 1 /' 2+e ) and 



\{t G Z" - n : \\t\\ < B, [He ■ p gt (Gal(Q/Q))] = r}| = n(R -i/2 + e, 
\{t G Z" : ||i|| < B}\ 



where the implicit constants do not depend on B. 



Remark 1.16. The proof of Theorem 1.15 will actually show that p Et (Gal(Q/Q ab )) = [U e ,'He\ for "most" t. 
For such t, G = ,9 St (Gal(Q/Q)) is a subgroup of GL 2 (Z) satisfying dct(G) = Z x andGnSL 2 (i) = [He^e]- 
The group G depends on t and not necessarily on E/K alone. 

These theorems build on several earlier results. Much focus has been on the family y 2 — x 3, + tix + t2 with 
(£1,^2) £ Z 2 in a growing box. In this context, Duke [Duk97] showed that for "most" elliptic curve E/Q one 
has pE,e (Gal(Q/Q)) = GL2(Z/£Z) for all primes £. Grant [GraOO] gave another proof with an asymptotic 
expression for those elliptic curves that do not have surjective mod i representations for all £. 

Cojocaru and Hall [CH05] considered considered a fixed model of an elliptic curve E over Q(T) (n = 1) 
with non-constant j-invariant. They proved that for "most" specializations t € Q, one has pE t ,i{Gal(Q/Q)) = 
GL2(Z/£Z) for all £ > 17. This will be reproved when we generalize to higher dimensions and number fields 
and is essentially Theorem 1.15. 

Building on Duke's theorem, Jones [JonlO] was able to show that [GL2(Z) : />E(Gal(Q/Q))] = 2 for 
"most" elliptic curve E over Q (such curves are called Serre curves in the literature). There has also been 
recent work of Cojocaru, Grant and Jones [CGJ10] studying Serre curves in one-parameter families which 
gives results similar to Theorem 1.15(i) with n = 1; they give much stronger error terms than ours but their 
methods do not generalize to arbitrary number fields. 

For k 7^ Q, the integral point version of Theorem 1.14 for the family y 2 = x 3 + t\x + £2 was proved in 
[ZywlO]. 

The proofs in all these papers, except Grant's and [CGJ10], uses some version of the large sieve (Grant's 
paper requires deep theorems of Mazur on elliptic curves over Q, and in particular do not generalize to the 
kj^Q setting). 

A key ingredient in the proof of our theorems is an effective version of HIT applied to the representation 
pE,t for rational primes £. 

Proposition 1.17. For each rational prime £ > 17, we have 

\{t e G£ - fi : \\t\\ < 5, p Et ,e(Gal(k/k)) 2 SL 2 (Z/«)}| < £ £« B [fc:Ql(»-i/2+o(i/<)) XogB 

where the implicit constants depend only on the model for E/K and the exceptional set fl. 

Since we are interested in the Galois action on the full torsion groups of elliptic curves (and hence with 
varying €} it is vital to have bounds with both good and explicit dependencies on £. With £ > 19, one can 
use Faltings theorem (originally the Mordell conjecture) to prove that 

|0 e Ol - Q : PEt . e (Ga\(k/k)) 2 SL a (Z/*Z)}| < E ,i 1. 

While this seems much stronger than Proposition 1.17, the difficulty in controlling how the implicit constant 
depends on I makes it unusable for our application. 

The other major ingredient in the proof of Theorem 1.14 will be an effective version of Serre's open image 
theorem due to Masser and Wiistholz. Note that even to prove a more qualitative version of Theorem 1.14, 
with the big-0 term replaced with o(l), we still need to use quantitative HIT bounds. 

1.3.3. Examples. We now give a few examples of families of elliptic curves to illustrate the theoretic results 
above. 

Example 1.18. Let E be the elliptic curve over the function field k(J) defined by the Weierstrass equation 

„, 2 o 36 1 

(1.8) y 2 +xy = x i x . 

v ' y J j- 1728 j - 1728 

This elliptic curve has j-invariant j, and for each t G k — {0, 1728}, specializing j by t gives an elliptic curve 
E t over k with j -invariant t. The image of pe is 

U E = {A e GL 2 (Z) : dct(A) e x*(Gal(fe/fc))} 

where Xk ■ Gal(fc/fe) — > Z x is the cyclotomic character of k. Note that He = GL2(Z) if and only if 
k n Q cyc = Q. If k ^ Q, then by Theorem 1.14 wc find that for "most" choices of t e k - {0, 1728}, the 
elliptic curve Et/k satisfies pE t (Gal(fc/fc)) = He 
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Now consider the case k = Q. We have He = GL2(Z) and [GL2(Z), GLa(Z)] has index 2 in SL2(Z). By 
Theorem 1.15, 

[GL 2 (Z) :/9Bt (Gal(Q/Q))] = 2 

for "most" t G Q - {0, 1728}. 

Similar remarks hold for the elliptic curve E over k(a, b) given by the equation y 2 = x 3 + ax + b; it has 
the same monodromy group He- 

Example 1.19. Let E be be the elliptic curve over the function field k(X) given by the Weierstrass equation 

y 2 = x(x — l)(x — A). 

For simplicity assume that k n Q cyc = Q, so H E = {i £ GL 2 (Z) : A = 7 (mod 2)}. For each t G k - {0, 1}, 
specializing A by t gives an elliptic curve E t : y 2 — x(x — l)(x — t) over k. If fc ^ Q, then for "most" choices 
of t G k — {0, 1}, the elliptic curve E t : y 2 = x{x — l)(x — t) satisfies pE t (G&l(k/k)) = He- 

Now consider the case k = Q. One can check that [%e, He] = {A <E SL2(Z) : A = I (mod 4)}. Therefore 
by Theorem 1.15 we know that for "most" choices of t G Q — {0, 1}, the elliptic curve Et: y 2 = x(x — l)(x — t) 
satisfies 

[He ■ AE t (Gal(Q/Q))] = [He n SL 2 (Z) : [He, He}] = 8 
and hence [GL 2 (Z) : p Et (Gal(Q/Q))] = 48. 

Example 1.20. Let E be an elliptic curve over Q(T) defined by replacing the variable j in (1.8) with 

(T 16 + 256T 8 + 4096) 3 

( - 9 ) 3 - T 32( T 8 + 16 ) ' 

For each t G Q — {0}, we have a specialization E t /Q by replacing T by We claim that 

[GL 2 (Z):p Et (Gal(Q/Q))] = 1536 

for "most" t G Q - {0}. 

Let us briefly explain how this elliptic curve arises. Define the function h(z) = ri{z)/rj(Az) on the upper- 
half plane where r/ is the Dedekind eta function. Let T be the group of A 6 SL2(Z) for which h(A ■ z) = h(z) 
where A acts on the upper-half plane via a linear fractional transformation. We claim that Y is a congruence 
subgroup of SL2(Z) of index 48 and level 32, and the equation (1.9) holds when T is replaced by h(z) 
and j is the modular j-function (these claims are straightforward to show after observing that h(z) s is the 
Hauptmodul of To (4)). Using that the Fourier expansion of h(z) at oo has rational coefficients, one can 
argue that for each integer m > 1, the group ±%(m) is conjugate to the group generated by Y mod m 
and the matrices of the form ( J °) with d G (Z/mZ) x . Some group theory then shows that [He '■ He] = 
[±He '■ ±He] has index 1536 in SL2(Z) (moreover, [He '■ He] is of the form H x Yle^2 SL2(Zf) for a certain 
subgroup H of index 1536 in SL2(Z2)). 

1.4. Overview. We now give a quick overview of the rest of the paper. In §2.2, we state our main version 
of HIT. In §3, we give an extension of the larger sieve to the setting of sieving rational or integral points; we 
also include a standalone application to arithmetic dynamics in §3.3. In §4, we state a special form of our 
larger sieve that will be suitable for our application of HIT which will be proved in §6. 

Our general approach to finding bounds is to reduced to the one variable case; more geometrically, we 
have an open subvariety of A£ which we will fiber by lines. We then prove a version of HIT for each line 
separately, and then combine these individual bounds (it is thus vital to have uniform bounds, and this 
uniformity needs the equidistribution and Grassmannian calculations of §5). 

Finally in §7, we give the details of our theorems on elliptic curves stated in §1.3; this involves combining 
our quantitative HIT with an effective version of Serre's open image theorem due to Masser and Wiistholz. 

Notation. For a number field k, let Ok be the ring of integers and let be the set of non-zero prime ideals 
of Ok- For each p G let F p be the residue field Ofc/p whose cardinality we denote by N(p). The degree of 
p is the unique integer deg(p) for which N(p) = p de s(P) where p is the prime lying under p. If Kjk is a finite 
Galois extension and p is unramificd in K, then (jp,K/k) will denote the Artin symbol which is a conjugacy 
class of Gal(A'/fc). Let fc cyc and fc ab be the cyclotomic and maximal abclian extensions of k, respectively, in 
k. The absolute height on P£ is denoted H. 



For a finite group G, let G" denote the set of conjugacy classes of G. For a profinite group G, the 
commutator subgroup [G, G] is the smallest closed normal subgroup of G for which G/[G, G] is abelian. We 
will always consider profinite groups with their profinite topology. 

If X is a scheme over a ring R and we have a ring homomorphism R — > R' , then we denote by Xri the 
scheme X Xs p0 c_R Speci?' over R' . The homomorphism is implicit in the notation; it will frequently be one 
of the natural homomorphisms k — > k, Ok — > k and Ok — > F p . 

Suppose that / and g are real valued functions of a real variable x. By / -C g (or j > /), we shall mean 
that there are positive constants C\ and G2 such that for all x > Gi, < C2 |.g(^c) | ■ We shall use 0(/) 

to denote an unspecied function g with g <C /. When needed we will indicate the dependence of the implied 
constants with subscripts on <C or 0, and in the main results we will indicate the dependencies. 

Acknowledgments. Thanks to David Brown for several useful suggestions. 

2. Main version 

2.1. Reinterpretation. It will be useful to view Hilbert's irreducibility theorem in terms of algebraic ge- 
ometry. Let U be a non-empty open subvariety of PjJ, and let 

p: ki(U) -4 G 

be a continuous and surjective homomorphism where G is a finite group and tt\(U) is the etale fundamental 
group of U. For every point u £ U(k), we have a homomorphism 

p u : Gal(k/k) = 7Ti (Spec fc) ^A tt(C/) A G 

by viewing u as a fc-morphism Spec — > {/ and using the functoriality of 7Ti . 

Denote the image of p u by G u . Note that we have suppressed the base points of our fundamental groups, 
and thus the representations p and p u are uniquely defined only up to an inner automorphism of G. More- 
over, the subgroup G u of G is only defined up to conjugation; this is not a problem for us since the condition 
G u = G is well-defined. We will frequently suppress base points when the choice does not matter. Hilbert 's 
irreducibility theorem is then the statement that G u = G for "most" u € U(k). 

Let's describe how this version of HIT relates to the classical polynomial version described in the intro- 
duction. Let f(x,Ti, . . . ,T n ) G k(Ti, . . . ,T n )[x] be an irreducible polynomial. Let L be the splitting field 
of / over k(T\, . . . ,T„) in a fixed algebraic closure. Let X be a variety over k with function field L. The 
extension L/k{T\, . . . ,T n ) gives a dominant rational map n: X ---> A£ = Specfcpi, . . . ,T n ]. By replacing 
X with a suitable non-empty open subvariety, we have an etale morphism n: X — >• U where U is an open 
subvariety of A£. Let G be the group of automorphisms of n: X — > U. The group G acts faithfully on 
X and 7r induces an isomorphism X/G — > U, so the cover tt: X — > U gives a continuous homomorphism 
m(U) G. Note that we have G = Gal(L/fc(T)). For u g U(k) C k n , the group G u will agree with the 
corresponding group constructed in §1.1. 

2.2. Uniform Hilbert's Irreducibility Theorem. Let U be a non-empty open subvariety of P^, and let 

p: m(U) -> G 

be a continuous and surjective homomorphism where G is a finite group and 7ri(f7) is the etale fundamental 
group of U . Let G 9 be the image of "K\(U^) under p, and let K be the minimal extension of k in k for which 
G 9 is the image of iti(Uk)- We have a short exact sequence 

1 -> G 9 -> G 4 Gal(AVfc) 1. 

For each u £ U(k), let G u be the image of 

Gal(fc/fc) = TTi(Spccfc) ^ m(U) A G. 

The subgroup G u of G is uniquely defined up to conjugation. 
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We define U to be the open subscheme of P^, that is the complement of the Zariski closure of PjJ — U in 
PJJ, fc . The Ofc-scheme U has generic fiber U. There exists a finite set S C Y, k such that p factors through a 
homomorphism 

tti(Uo) -> G 

where O is the ring of 5-intcgcrs in k. The main quantitative form of HIT in this paper is the following: 

Theorem 2.1. Let C be a non-empty subset of G that is stable under conjugation. For each conjugacy class 

1 \G K \ 

k 6 Gal(A'/fc) define C K = C fl ld~ 1 (k). Define the numbers S := max - — r , — — ; and 
K 1 ' r \ J ree Gal(K/fe)» |k| \Gs\ 



c:= |G 9 rexp 



v logiV(p) \ 

^ s n(p) y 



deg(p) = l and AT(p)>|G 3 | 2 

(i) Assume further that U is an open subvariety o/AJJ. Then 

\{u £ U{k)r\(D% : \\u\\ <B,G U C C}\ < v C B^^ 1+S] logB. 

(ii) We have 

\{u e U(k) : H{u) < B, G u C C}\ <u cB^ k: ^ n+s) logfl. 
In 6oi/i cases, the implicit constant depends only on U and the open embedding U C P^ . 

In the situation where K = k, wc have (5 = |C|/|G|. This is the case in Theorem 1.4 where we made the 
assumption that L/k(T) is geometric, hence Theorem 1.4 is an easy consequence of Theorem 2.1. 

Remark 2.2. In applications, one might start with a representation p: 7Ti(W) — >• G where W is an open 
subscheme of Pg, for some ring of 5-integers. After possibly increasing S, the schemes W and Uq will 
agree. The reason for our construction of U from U C P^ is simply that our bounds can be expressed in 
terms of U C P£ and the set S. 

3. The larger sieve 

In this section, we give an extension of Gallagher's larger sieve [Gal71] (it is Theorem 3.4 below in the case 
k = Q and n = 1). Our versions can be used to sieve rational or integral points in PJ? or AJJ, respectively. 
The larger sieve tends to be very effective when we consider sets that have strict constraints on the size 
of their images modulo several primes p. An identical version of the sieve in the case F\ can be found in 
[EEHK09]. We will only use the integral point version in this paper, the rational point version is included 
for future reference. 

3.1. The larger sieve for rational points. 

Theorem 3.1 (Larger sieve for P™(fc)). Let k be number field. Let A be a finite subset of¥ n (k) and B > 
a real number such that H(P) < B for all P G A. 

Let J be a finite set of maximal ideals of Ok ■ For every p € J , let g p > 1 be a real number such that the 
reduction of A in P"(F P ) has cardinality at most g v . Then 

^logiV(p)-[fc:Q] log(2B 2 ) 



peJ 5 * 



provided the denominator is positive. 



Remark 3.2. One can use Theorem 3.1 to sieve points on arbitrary quasi-projective varieties V over k. First 
choose an embedding V ^ P£ (so V is open in a Zariski closed subvariety of P£) and then give V the 
corresponding height. Note that the bound in Theorem 3.1 makes no direct reference to the dimension n. 

The main arithmetic input of the sieve is the following easy lemma. It says that if two distinct points P 
and Q in P™(fc) have the same reduction modulo several primes, then one of them must have large height. 
We will write P = Q mod p if the reduction of P and Q in P"(F P ) agree. 
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Lemma 3.3. Let P and Q be distinct elements ofV n (k). Then 

log N(p) < [k : Q] log (2H(P)H(Q)) . 

pes fc 

P=Q mod p 

Proof. Choose coordinates <Zj, bj G k such that P = [ao, . . . , a n ] and Q = [bo, . . . , b n \. Now fix a prime ideal 
p G Sfc such that P = Q mod p. We claim that: 

(3.1) 1 < minordp(a;&j — ajbi) — minord p (a;) — minord p (6;). 

Note that the right hand side of (3.1) does not depend on the initial choice of coordinates. So without loss 
of generality, we may assume that min, ord p (a;) = min^ ord p (&i) = 0. Under this assumption, P = Q mod p 
is equivalent to min^ ardp(aibj — ajbi) > 1, and the claim follows. 
By (3.1), we have 

(3.2) logiV(p) < minordp(aj&, - a,-6i) logiV(p) - minord p (aj) log N(p) 
pes fc pes fc rj pes fc 

P=Q mod p 

— minord p (&i) logiV(p). 
pes fc 

Let be the set of archimedean places of k. For each v G E^ , let |-|„ be the extension of the usual 
absolute value on R to the completion k v . Rewriting (3.2) in terms of heights gives 

Yl ^gN(p)<logH(P) + logH(Q)-logH([a i b j -a j b i ]) 



pGE 
P=Q mod p 



k v : R] /lnaxj^- \aibj - ajh\ v 



[k:Q] Vmaxi \di\ v ■ max, \bi\ v 



Using H > 1 and the triangle inequality, we have 



1 



£ log N(p) < log H(P) + log H(Q) + £ log 2 



L ^ J peS fc , P=Q mod p L 

= logJJ(P)+logir(Q)+log2. □ 

Proof of Theorem 3.1. Fix a prime ideal p G J. For each c G P"(F p ), let Z(c, p) be the number of elements 
in .A whose reduction in P"(F p ) is equal to c. By the Cauchy-Schwartz inequality and our assumption on 
the cardinality of A modulo p, we have the following inequality: 



■9p 9v ce¥"(w p ) 9 p ceP"(F p ) 



= -( E z(c 7 p)) 2 <-U z ( c 'P) 



E ! = ^+ E 

P,QeA P,QeA,P^Q 
P=Q mod p P=Q mod p 



Multiplying by logiV(p) and summing over all p G J gives the following: 
|^^^)< E logiV ( p)(|A| + £ 1 



pe./ 5p pe./ p,Q&A,p^q 

P=Q mod p 

= |A|^log7V(p)+ ^ ( J2 l0 ^ N (P) 
peJ P.QeA.p^Q peJ 

P=Q mod p 



By Lemma 3.3, we have 

logiV(p) 



lAl 2J2^Pl<\A\J2logN(p)+ J2 [k:Q)log(2H(P)H(Q)) 



peJ gp peJ p,qeA,p^q 

in 



and by our choice of B, 

\A\ 2 E < I- 4 ! E lo s N &) + (i- 4 ! 2 - \ A ^ k ■ lo s( 2i?2 )- 

After cancelling both sides by \A\ (the theorem is trivial if \A\ = 0), the theorem is immediate. □ 
3.2. The larger sieve for integral points. 

Theorem 3.4 (Larger sieve for Let k be number field. Let A be a finite subset of 02 and B > a real 

number such that \\P — Q\\ < B for all P,Q e A. 

Let J be a finite set of maximal ideals of Ok . For every p € J , let g p > 1 be a real number such that the 
reduction of A in F™ has cardinality at most g v . Then 

5^IogJV(p)-[fe:Q] logB 
pe.J 5 " 

provided the denominator is positive. 

Lemma 3.5. Let P and Q be distinct elements of O^. Then 



J2 logTV(p) < [fc:Q]log||P-Q|. 

P=Q mod p 

Proof. If p G Sfe is a prime ideal such that P = Q mod p, then 

minord p (ai — > 1 

i 

where P = (ai, . . . , a„) and Q = (b\, . . . , b n ). Therefore, we have 

-I- Y, l0 $ N ^ * TfeTQ] E nhnord p(ai - fc) logiV(p) 

P=Q mod p 

= E ^#log(max|a i -6 i | l ,)-logH([P-Q]) 

^ E fe^log||P-Q|-logH([P-Q]) 

= log ||P -Ql- log H([P-Q}) 

where [P — Q] is the image of P — Q in P™ _1 (fc). We obtain the desired inequality by noting that H([P — Q]) > 
1. □ 

Proof of Theorem 3.4- The proof is identical to that of Theorem 3.1, the main difference being that we use 
Lemma 3.5 in place of Lemma 3.3. □ 

3.3. Interlude: orbits modulo p. In this section (which is independent of the rest of the paper), we 
consider a problem of arithmetic dynamics studied by Silverman [Sil08], and then by Akbary and Ghioca 
[AG09]. This quick application of our larger sieve gives a good illustration of how Theorem 3.4 can be used 
to sieve points on general quasi-projectivc varieties. It is also significantly easier that our main application 
(Theorem 2.1) which requires a more elaborate proof. 

Let V be a quasi-projective variety defined over a number field k. Fix a morphism (p : V —> V and a point 
P G V(k). Suppose that the forward <p-orbit 

O v (P) :={P,<p(P),<p 2 (P)^ 3 (P),...} 
li 



is infinite. Choose a model of V and <p over the ring of integers of k. Then for all but finitely many non-zero 
prime ideals p of Ok, we can (by abuse of notation) consider the reduction 

<p p : V(¥ p ) —> V(¥ p ) 

and the reduction P p 6 V(¥ p ) of the point P. We define m p (ip,P) to be the cardinality of the forward 
c/?p-orbit 

C ¥ , p (Pp):={Pp,¥' P (Pp),^(P p ),...}. 
For the finite number of excluded primes, wc simply define m p {ip, P) = +00. The choice of model for V and 
tp is not important for our applications since a different choice would change only finitely many of the values 
m p (<p,P). 

Since V is quasi-projective, we may choose an embedding V C P£ defined over k (so V is open in a closed 
subvariety of P£). Using this embedding, we equip V with the height H of P£ ; it will be convenient to work 
with the logarithmic height on PJJ, i.e., ft = logoff. By [Sil08, Proposition 4], there are numbers d > 1 and 
c > such that h{ip i (P)) < d l (h(P) + c) holds for all integers i > 0. 

Theorem 3.6. For any e < l/\ogd, the set 

{peSif: m p ((f,P) > elogA(p)} 

has natural density 1. 

In [AG09], Akbary and Ghioca define the degree deg(ip) of the morphism (p. If dcg((p) > 1, then we can 
choose d — dcg(ip) above. Theorem 3.6 is then the same as Theorem 1.1 (i) of [AG09]. If dcg(iy9) = 1, then 
[AG09] gives a stronger bound which also follows from the larger sieve. 

This theorem is a slight improvement over [Sil08, Theorem 3], where it is shown that for each A < 1, the 
set {p : m p (<p,P) > (logA^(p)) A } has analytic density 1. The bound m p (ip,P) > e\ogN(p) is likely far from 
optimal. In fact, one expects to be able to replace log N(p) by an appropriate power of N(p) (see [Sil08, §6] 
for details). 

Proof of Theorem 3.6. Since e < 1/logd, we can choose constants < a < 1 and C > 1 such that (1 + 
C~ 1 )e < a/ \ogd. Define the function g(x) := elogx and the set 

y{x) := {p : N(p) < x, m p {ip,P) < g(x)}. 

It suffices to show that |^(x)| = o(x/ logx) as x — > +00. 
Define the set 

A(x) = {QE O v {P) : h{Q) < x a }. 
The number of i > that satisfy d l (h(P) + c) < x a is log a; + 0(1), so using this and the assumption 
\O v (P)\ = 00 we have 

\A(x)\ > log £ + 0(1). 
logd 

We now find an upper bound for |-4(x)| using the larger sieve. For each p e ^(x), the reduction of 
A(x) modulo p lies in O lfIp (P p ) which has cardinality at most g(x). Define L := J2pey(x) N(p) and 
B:=[k: Q] log (2(e xC ") 2 ) = [k : Q)(2x a + log 2). Assume that L - g(x) > Cg{x)B holds. Then by Theorem 
3.1, we have 

\A(x)\ < a(x) + ^ B ~^ B 

lA[X)l - L/g(x)-B- 9{X)+ L-g(x)B 

(from our assumption, we have L/g(X) — B > (C — 1)B + 1 > 0). Therefore, 

1 m /x q(x) 2 B~q(x)B , , q(x) 2 B — q(x)B „ 1, , , 

A(x) < g(x) + ^ Jt±-L- < g(x) + JK > yV ; = 1 + O" 1 )g(x) + 1). 

L — g{x)B Cg(x)B 

and so |^(.t)| < (1 + C^e logx + 0(1). 

Since (1 + C~ 1 )e < a/logd, our lower and upper bounds for |-A(a;)| are contradictory for all sufficiently 
large x. Therefore, we must have L — g(x) < Cg(x)B. Thus 

log^(p) < Ce[k : Q](logx)(2a; Q + log 2) + elogx < cc Q loga;. 



Using partial summation, this implies that <C x a . In particular, \5^{x)\ = o{x/\ogx). 



□ 



4. Special case of larger sieve 

In this section we deduce some bounds from our larger sieve. We will of course apply them later to obtain 
bounds for Hilbert's Irreducibility Theorem, but to simplify the exposition we will keep this application 
separate. 

Proposition 4.1. Let k be a number field and let S a finite subset o/S^.. 

(i) (Rational points) Let A a subset of¥ n (k) such that H{P) < B for all P G A. Suppose that for each 
p G Efc — S, the cardinality of the image of A under the reduction map P"(fc) — ¥ P™(F p ) is at most 
g v where 

g v <6(N(p) + DN(p) 1 / 2 ) 
for some constants < S < 1 and D > 1 . Then 

\A\« k D*e Xp ( £ i^W^. 

V pes with dcg(p) = l and N(p)>D 2 ' 

(ii) (Integral points) Let A a subset of such that \\P — Q\\ < B for all P,Q G A. Suppose that for 
each p G Eft — S , the cardinality of the image of A under the reduction map —> F™ is at most g v 
where 

g v <S(N(p) + DN(p) 1 / 2 ) 
for some constants < 5 < 1 and D > 1. Then 

\A\« k D*e X J £ l -^r) BlkMS - 

^peS with dcg(p) = l and N(p)>D 2 ' 

Remark 4.2. 

(i) The condition on g v is quite common when n = 1 where it implies that the proportion of elements 
of F 1 (¥ p ) (or A x (F p )) that belong to A mod p is at most 8. 

(ii) In Corollary 19 and 20 of [EEHK09], there are similiar results under the much stronger hypothesis 
that g p < CN(p) a where C > and < a < 1 are constants (they state it only for subset A of 
P 1 (fc) but everything easily generalizes to our setting). They use this stronger hypothesis to obtains 
explicit bounds for |^4| that are polynomial in log B. 

4.1. Analytic bounds. 

Lemma 4.3. For a number field k and a real number x > 1, 

^ logJV(p) , n m a V- logiV(p) „ 1 

£ -NW =logx+ ° k(1) and 22 N^i2 <<k ^- 

pes k ,N(p)<x vtv pen k ,N(p)>x yrj 

Proof. By partial summation ([Mur08, Theorem 2.1.1]), we have 

^ iogiv(p) _ Mx)_ r Mt) 

^ N(p) ~ x + J 2 t* 

where ipk{x) = X)pes fc N(p)<x l°g-^(p)- By the prime number theorem (with a worked out error term), we 
have ipk{x) = x + Ok(x/(\ogx) A ) for some constant A > 1. Therefore, 

logiV(p) f x dt ( f x dt \ 

peT, k ,N{p)<x yrJ J2 J2 \ £> ) 

The second expression is proven in a similiar fashion. □ 
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Lemma 4.4. Let k be a number field and fix a constant D > 1. Then 

D 2 <N(p)<x KrJ XV > 

where > is a constant depending only on k. 
Proof. For each prime p € Sfe, we have 

logTV(p) logiV(p) 1 > log N (p) / £> 



iV(p) + DiV(p) 1 /2 AT(p) i + D/A^(p)i/2 - N(p) V ^(p) 1/2 

So by summing over all p with D 2 < iV(p) < a: and using Lemma 4.3, we obtain 

v logiV(p) v logiV(p) n V logiV(p) 

, ^ JVfp) +L»iV(p) 1 /2 " jv(p) ^ iV(p) 3 / 2 

£> 2 <iV(p)<x vfv D 2 <N(p)<x yt ^' N(p)>D 2 K1 ' 

= (togs - log(7J 2 ) + fc (l)) + D • O fe (l/(i? 2 ) 1/2 ) 

= log.T-log(Z? 2 ) + O fc (l). □ 

Lemma 4.5. Lei k be a number field and S a finite subset o/Sfc. For each p e Efc — 5, /ia; a positive integer 
g v such that 

9 p<6(N(p) + DN(p)^ 2 ) 

where < <5 < 1 and D > 1 are constants. Let B > 1 be any real number. 
By setting 

v pes,JV(p)>n 2 VfV 7 
where /3k > 1 is a certain constant depending only on k, we obtain the bound 

]T logJV(p)-[fc:Q]logB 
(4 1) jSjW «*7J 2 cxpf V ^^ W^ 

£> 2 <N(p)<x 
and i/ie denominator of (4-1) is positive. 
Proof. Using the given bound on g p and Lemma 4.4 we have: 

v logiV(p) ! / ^ logiV(p) _ v logiV(p)\ 

^ 9p ~ \ ^ N(p) + DN(p) 1 / 2 jv(p) / 

peE fc -s yp v pes fc w pes,N(p)>D 2 yr; 7 

£> 2 <N(p)<x D 2 <JV(p)<:r 

logJV(p) 
N(p) 

p<£S,N(p)>D 2 vtv 

Define /3f- := e Uk . With our choice of x we find that the expression (4.2) is equal to 1 + [k : Q] log_B, and 
thus 

logJV(p) 



(4.2) > 5- 1 ( log(x) - log(/J 2 ) - a k - £ 



J2 ^fZ-[fc:Q]logS>l. 



pes fc -s 5p 

2 <iV(p)<x 

So the denominator (and hence also the numerator) of the expression in (4.1) is at least 1. Thus the left hand 
side of (4.1) is bounded by J2n(p)<x 1°S N(p) <Cfc x. The lemma follows by once again using our specific 
choice of x. □ 
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4.2. Proof of Proposition 4.1. We first consider part (i). Let J be the set of p e St - S such that 
D 2 < N(p) < x, where x is a real number to be chosen later. By the larger sieve (Theorem 3.1), we have 
the bound 



(4.3) \A\ < 



^logiV(p)-[fc:Q] log(2£ 2 ) 



^ logiV(p) _ log(2 ^ 2) 

provided the denominator is positive. 

Choosing x as in Lemma 4.5 (with B replaced by 2B 2 ), we find the that denominator is in fact positive. 

Moreover, Lemma 4.5 now tells us that \A\ < fc D 2 cxp ^ p£S ^ p)>D 2 '°^,) p) J B 2 ^ s . Finally, we need only 

restrict to those p G S with dcg(p) = 1 since E pe s fc , d cg (p)>2 ^r^T L 

Part (ii) is proven in a similiar manner; the main difference being that we use Theorem 3.4 instead of 
Theorem 3.1. 

5. Equidistribution 

In this section, we consider the equidistribution of Frobenius conjugacy classes coming from curves (and in 
particular lines) over finite fields. In §5.1, we recall bounds resulting from the Grothendieck-Lefschetz trace 
formula and Deligne's completion of the Weil conjectures. We will later apply these results to projective 
spaces by first fibering by many rational lines; it will thus be vital that our bounds are uniform. 

5.1. Chebotarev for curves over finite fields. Let X be a smooth, projective, geometrically integral 
curve of genus g defined over a finite field ¥ q with q elements. Let U be a non-empty open affine subvariety 
of X. For each u G U(¥ q ), the homomorphism Gal(F g /F g ) tt\{U) is determined by the value it takes on 
the g-th power Frobenius automorphism Frob 9 of F g ; this gives a conjugacy class Frob„ of 7Ti(£/). 
Fix a finite group G and a surjective continuous homomorphism 

p: ni(U) -> G. 

Let G 9 denote the image of the geometric fundamental group iti(U^ ) under p. We then have a natural exact 
sequence 

14G 9 ^G4 Gal{W qd /¥ q ) =: T -> 1. 
where ip(p(Fiob u )) = {Frob 9 } for all u £ U{¥ q ). Assume further that the corresponding representation 
7i"i(f% ) — > G is tamely ramified at all the points of (X — U)(¥ q ). 

Proposition 5.1. With notation as above, let C be a subset of ip~ 1 (Froh q ) that is stable under conjugation 
by G. Then 



\{u e U(¥ q ) : p(Frob u ) C C}\ - &\U(F q )\ 



< |Cf/ 2 (l - \&\- 1 ) 1 l 2 {2g - 2 + #(X - U)(W q ))qW 



Proof. (Sketch) We follow the outline of Kowalski in [Kow06, Theorem 1] adding more details concerning 
the bounds where appropriate. Let M = #(X — U)(¥ q ). 

Fix a prime I that does not divide q. Let G and T be the set of Q f -valued irreducible characters of G 
and r, respectively (i.e., those coming from finite dimensional linear representations over Qi). Composition 
by if induces an injective r ^4 G which we will sometimes view as an inclusion. Let 5c ■ G — > {0, 1} be the 
characteristic function of C, which we may write in the form 

MsO = c xx(g) 



where c x := j^y X) 9 gc The quantity we are trying to estimate then becomes 

|{« G U(V q ) : p(Frob u ) C C}\ = ^ J c (p(Frob u )) = ^ c % ^ X (p(Frob u )). 

ueu(¥ q ) x€G ueu(¥„) 
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We first consider the contribution coming from those x that arise from a character of T. So 

J2 V^(p(Frob tl ))) = E^E^5)I E Hv(p(Frob u ))) 
,/,gr «6?7(F g ) </,gf sec «ec/(F,) 

^E E E VXFrob,)^(Frob 9 ) 
1 1 gee ueu(w q ) ^ g f 

where the last line uses our assumption y(C) = {Frob g }. Since all the characters of T are one dimensional, 
we have 



E c ^ E V#MFrob„))) 



|G| 



this is the "main term" of our estimate. By the Cauchy-Schwarz inequality 
(5.1) ||{« e U(¥ q ) : p(Frob u ) C C}\ - &\U(¥ q )\ 



< 



E c * E x(p(Frob u )) 

x gg_f uet7(F 9 ) 
1/2 



^ | J2 x(p(FrobJ) 

x gg-f «ec/(F,) 



2x1/2 C| 1/2 



|G|V 



172 ( E I E x(p(Frob u) ) 

x gg_f u£U(W q ) 



2 \ !/ 2 



Now fix any character \ 6 G — T. Let be a lisse Q^-adic sheaf corresponding to the character 
X o p: tt\{U) — > Q^. By the Grothendieck-Lefschetz trace formula, we have 

2 

£ x(p(Frob u )) = ^(-l) l Tr(Fr|^(C/ f? ,^ x )) 

uGU(¥ q ) i=0 

where Fr is the geometric Frobenius automorphism. By Dcligne's theorem, the eigenvalues of Fr acting on 
H l c {Uf , J^ x ) are algebraic integers with absolute values < q 1 / 2 in C (under any embedding Q e C). So 



£ x(p(Frob„))| <Y<f /2 &™Hl{U fq ,^ x ). 

ueU(¥ q ) i=0 

The sheaf J^ x comes from an irreducible representation of G for which G 9 acts non-trivially (because x & F), 
so the coinvariants («^x)iri(ff ) arG trivial. Therefore, H 2 (Uf ,^ x ) = since it is canonically isomorphic to 
( t ^ x ) 7ri ( [/ _ )(— 1). Since U is affine and smooth, we also have H®(Uf , J^ x ) = ®- Therefore 

x(p(Frob u ))| < qV 2 djmHi(U fq ,& x ) = -q 1/2 Xc(Uf t ,& x ) 

ueu(¥ q ) 

where Xc(U Wq ,J? x ) := ELo^ 1 )* dim H H U f g . By [Kat88, §2.3.1], 

Xc(E/ Fg! Jy = x(l) • Xc(U ¥q ,Qi) = x(l)(2-2 fl + M) 
(the Swan conductors that occur are all zero by our tameness assumption on p). Therefore 

]T X (p(Frob u ))| < x(l) • q 1/2 (2g - 2 + M). 

uec/(F,) 

(Note that there is no contradiction if 2g — 2 + M < 0. In these cases we have G = T.) 

16 



Returning to (5.1), we have 

\{ ue U(¥ q ):p(Frob u )CC}\-^l\U(¥ q )\ < £ x(l) 2 ) V V /a (2 5 - 2 + M) 



x eG-r 



ici 1 / 2 

|G|V 



— (|G|-|r|) 1 /V /2 (2.g-2 + M). □ 



5.2. Intersection with lines. We shall use the same set-up as §2.2. Let k be a number field, and let U be 
a non-empty open subvariety of PjJ. Let be the Zariski closure of P£ — U in P£, fc (where P£ is the generic 
fiber P(9 fc )- We define W to be the complement of Z in Pe> fc , it is an open subscheme of Pg, fc with generic 
fiber U. Fix a continuous and surjective homomorphism 

p: tt-l(Uq) ->■ G 

where G is a finite group and is the ring of S- integers in k for a fixed finite set S C Sfe. Let G 9 be the 
image of itifJAr) under p, and let iC be the minimal extension of k in ft for which G 9 is the image of tti(Uk)- 
We have a short exact sequence 

1^G 9 4G4 Gal(AVfc) -> 1. 

For all p G S fc - 5 and u G W(F P ), we have ^(p(Frob„)) G (p,K/k). 

Let Gr/Ofc be the Grassmannian scheme Grass(l,n) over Ok- For any field extension k' of ft, Grv is 
the familiar variety which parametrizes the linear 1-dimension subvaricties (i.e., lines) of P£, . Let W be the 
closed subvariety of Gr^ such that for every algebraically closed extension k'/k and line L G Gr(fc'), we 
have L ^ W(k') if and only if L intersects Zy only at smooth points of Zy, and transversally at each of 
these points. Our interest in the variety W is due to the following lemma. 

Lemma 5.2. For all lines L G (Gr^ — W)(k), the homomorphism 
has image G 9 . 

Proof. Choosing an embedding k '-t C, it suffices to prove the lemma for an arbitrary line L G (Gr^ — W)(C) 
(the image of iri(Uc) under p is still G 9 ). The lemma is true for a generic line by Bertini's theorem, so the 
result follows by (topologically) deforming L to a generic element in (Gr^ — W)(C). □ 

Let W be the Zariski closure of W in Gr. We now prove an equidistribution theorem for lines L in Pp p 
that do not lie in W(F P ). It will allow us to reduce our Hilbert irreducibility bounds to the one dimensional 
setting. 

Theorem 5.3. Let C be a subset of G that is stable under conjugation such that k := y(G) is a conjugacy 
class of G&\(K/k). Take any prime p G — S for which p j \G 9 \ and (p,K/k) = n, and any line L G 
(Gr Fp - W Fp )(F p ). Then 

\{u G W(F„) n L(F P ) : p(Frob u ) C G}| = A ^Mp) + O v (&^N{p)^ 



un 



Proof. We first introduce some standard notation. Let k p be the completion of k at the prime p. Let 
be the ring of integers in the maximal unramified extension of fc™ of k p (in a fixed algebraic closure fc p ). 
The ring O™ is a complete discrete valuation ring with residue field F p . 

By excluding a finite number of p G Sfc — S (that depend only onMC P^, and hence only on U C P£), 
we can assume that each line L G (Gr — W)(F p ) lifts to a line £ G (Gr — W)(G P ) by Hensel's lemma. 

Let V be the scheme theoretic intersection of C and Zq p ■ It is a horizontal divisor of £ which is etale 
over Spec O p . Let V be the G p -scheme C — V. Choose a point a G V(F p ) with a lift 01 G V(O p n ). By the 
Grothendieck specialization theorem, the natural homomorphisms 



7Ti(Vfc«n,Oi) -> 7Ti(Voun,Ol) <- ^1(^,00) 
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induce an isomorphism between the prime to p = charF p quotients of 7Ti(V^, ai) — > 7Ti(V^ ,ai) and 
7Ti (Vj , a ). In the present setting, an accessible proof of Grothendieck's theorem can be found in [Wew99, §4]. 
Therefore the homomorphism 

7ri(V fp ,a ) ->■ 7ri(V un,ai) -> 7Ti(W,Oi) A G 

has the same image as iri(V% ,a\) — > 7ri(Voun, ai) — > 7Ti(£/, ai) A G, which by Lemma 5.2 is G 9 (the as- 
sumption that p { | G 9 1 is needed here) . 

Let pp be the representation 7Ti(VF p ,ao) ~~ ► ""1(^,11) A G, and denote its image by G p . We have just 
shown that pp(iri(Vg ,a>o)) = G 9 . Let d be the index [G p : G 9 ] and let F be the degree d extension of F p . 
We have a short exact sequence 

1 -> G 9 -¥ G p Gal(F/F p ) -> 1. 

Define the set C — C n G p , which is stable under conjugation in G p . For u 6 V(F p ) C U(¥p), we have 
p(Frob„) C C if and only if /9 p (Frob„) C C' . Hence 

|{ueW(F p )nL(F p ) : p(Frob u ) C C}\ = \{u G V Fp (F p ) : p p (Frob u ) C G'}|. 

Our assumption that <f(C) = k and (p,K/k) = n implies that the set <p v (C') consists of just the 7V(p)-th 
power Frobenius automorphism. Therefore by Proposition 5.1 

{u G U(¥ p ) n L(F p ) : p(Frob u ) C C}\ JS|W(F P )|| < |Gf/ 2 (l - |G^|- 1 ) 1 / 2 (2 • - 2 + \V^ 9 )\)N(p)^ 2 , 

where we have used that geometrically p p is at worst tamely ramified (since p \ \ G 9 \). 
Since D -> SpccO p is etale and £ £ £ we have |£>(F P )| = \D(k)\ <[/ 1. So 

|{u G W(F P ) n L(F p ) : p(Frob„) C C}\ - ^W P )| 

<|G'| 1/2 (1 - |G^|- 1 ) 1/2 (-2 + ID^DJV^) 1 ^ « y IC'I^JVd)) 1 / 3 . 

The theorem follows by noting that |G'| = |G|/|«|. □ 

For a line £ ^ W"(fe), we can consider its reduction in Gr(F p ) for primes p € St. To apply Theorem 5.3 
we need that Cr p does not lie in Wf p . The follow lemma controls the number of primes that have this property 
(this will be important later when we vary the line C). Choose an embedding Gr^ (for example, the 

Pliicker embedding with N = ( n t )), and let H be a height on Gr^ coming from the height on Pj^. 

Lemma 5.4. For any line L G Gr(fc) — W(k), 



io g N(p)^ulogH(C) + 0(l) 

pes fc -s 
c rp ew(F p ) 

where the implied constant depends only on U C P£ (and in particular not on C). 

Proof. Fix a non-constant morphism <$>: Gr^ — > P\ for which -1 ([O : 1]) 3 W. By choosing a model of <fi 
over Ok, we will have morphisms Grf p — > P^ of special fibers such that Wv p lies in the fibre above [0 : 1] 
for most p. Therefore 

]T logiV(p)< logiV(p) + 0(l)< fe log (</>(£)) +0(1) 

P es fc -s pe^ k -s 

C Fp SW(Fp) 0(£) mod p=[0:l]eF 1 (F t> ) 

by Lemma 3.3. Finally, note that log #(<£(£) ) < \ogH(£) + 0(1) (cf. [Scr97, §2.6]). □ 
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6. Proof of Theorem 2.1 



6.1. Proof of Theorem 2.1(i). Fix notation as in §2.2 and §5.2. Without loss of generality, we may assume 
that U is an open sub-scheme of AJJ, = Spec Ok [xi, . . . , x n ] where we view Ag, as an open subscheme of Pq 
via the map (x\, . . . , x„) i-> [xi, . . . , x n , 1]. Let 

C: A£ _1 -> Grfe, 6 ^ £ fc 

be the morphism for which is the line defined by xi = &i, . . . , x„_i = for b = . . . , Without 
loss of generality, we may assume that the image of the morphism C does not lie in W C Gr& (if not, then 
we can arrange this by an initial change of coordinates) . 

We then have a disjoint union 

{u G U{k) n Ofc : fit I < B} = \J {(6i,..., b n -i, a) e£ b n U{k) :aeO k , }\a\\ < B}. 

b£0™-\\\b\\<B 

We first consider those b for which C b G W(k). Since W does not lie in the image of C: A^ _1 — > Gr^, we 
find that £ _1 (W) is a closed subvariety of A^ _1 of codimension > 1. So using trivial bounds for each of 
these lines, we have 

|{«= {h,.-., bn-i, a) G L b n U{k) :a€O k , \\a\\ < B, G u C C}| 

6eO£-\ ||6|<B 
£i,6VK(fe) 

« fe i?[ fc:Q l • |{6 G Or 1 : \\b\\ < B, C b G W(fc)}| «[/ • B^K™" 2 ) = s^ORn-i). 

This gives: 

(6.1) |{u G U{k) n Ol : \\u\\ <B,G U C C}\ + Ou(B^^ n -^) 

J2 \{(b 1 ,...,b n - 1 ,a)e£ b nU(k):aGO k ,\\a\\<B,G u CC}\ 

6eO£~\ \\b\\<B 
C b (£W(k) 

<[/B [fe.-Q](n-i) max || u = (^..^ bn _ u ) e £ b nu(k) : a G O fc , || « || <5,G„C C}|. 

6e0£~\ |6[<B 

£t0W(fc) 



Now fix any b G O)!" 1 with ||6|| < B for which £ 6 g Let 4 be the set of u = (&i, . . . , 6„_i, a) G 

with a G Ofc for which |a| < B and G„ C C. We will show that 

(6.2) |^|« £7 |G«| 2 exp( Y. ^^f^W^logB. 

^ peS with dcg(p) = 1 ^ ' 
and N(p) > \G g \ 2 

Applying this to (6.1) then gives 

|{u G U{k) n Ol : ||u|| < B, G u C C}\ |G» | 2 exp ( £ i2|^ Wq](»-i+s) logjB 

^ peS with dcg(p) = 1 ' 
and JV(p) > |G 9 | 2 

which will complete the proof of Theorem 2.1 (i) . 

With our fixed b, we will now prove (6.2). Let T be the finite set of primes p G Xfc for which cither p 
divides \G 9 \ or for which L b mod p G W(F p ). Take any p G Sfc — (S U T), and let g p be the cardinality 
of the image of A under the reduction modulo p map O r k L h-> F?. Let ft be the conjugacy class (p,K/k) of 
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Gal(K/k). By Theorem 5.3, 



<a(w(i)) + c„|G»|«(p)"^ 

where Co > 1 is a constant depending only on U C P£. By Proposition 4.1 (ii), we have the bound 
(6.3) I^IG^f exp( £ !5§L^fl[«ll*. 

pGSUT with dcg(p) = 1 and ]V(p) > |G S | 2 

If p divides |G 9 |, then dcg(p) = 1 and N(p) > \G 9 \ 2 cannot both hold; thus these primes do not contribute 
to (6.3). 

For any non-empty finite set R C £ fc , we have exp (Epei? '"w^ ) <fc EpeH lo S N (P) [MRS96, Corol- 
lary 2.3]. This and Lemma 5.4 give us 



exp 



£ i2 |Sr) <<fc E logiV(p) + 0(l)<<^logff(£ 6 ) + 0(l). 

pes fc -s.£ 6 mod pew(Fp) ^ ' pes fc -s 

N(p)>\G 3 \ 2 £b mod peW(Fp) 



Observe that \ogH(Cb) <^c log iJ(6) + 0(1) ^Cfe logi? (cf. [Ser97, §2.6]). Combining these additional bounds 
with (6.3) gives the desired bound (6.2). 

6.2. Proof of Theorem 2.1(H). We will reduce to the integral points case using the following proposition 
(see [Ser97, §13.4]). 



Proposition 6.1. Let k be a number field and n a positive integer. There is a constant cq — Co(k,n) such 
that every point x £ P"(fc) is representable by coordinates a = (ao, . . . , a„) £ with 

||a|| < cqH(x). 

Let / : A-u \ {(0, . . . , 0)} — > P£ be the morphism (xq, ■ ■ ■ , x n ) M- [xo, ■ ■ ■ , x n ]. Without loss of generality, 
we may assume that U lies in the image of /. Let U' be the inverse image of U under /; it is a non-empty 
open subscheme of A^ +1 . Define the representation 

p': 7ri(Z7') ->ici(U) A G 

where the first homomorphism arises from /. For each vl £ U'(k), we have a representation Gal(fc/fc) — 
7Tx(U') — > G whose image we denote by G u >. For u' £ U'(k), the groups G u > and G u arc conjugate in G 
where u = f(u') £ U(k). By Proposition 6.1, 

|{u £ U(k) : H{u) < B, G u C C}\ < \{u' £ U'{k) n O n k +1 : \\u'\\ < c B, G u > C C}\. 

By Theorem 2.1(i), which was proved in the previous section, this is Oy (c(co-B)' fe:( ®'™ + ' 5 ' ) log(co-B)) and hence 
also Ou(cBl k: <®( n+ V log 5). 

7. Elliptic curves 

7.1. Set up. Fix a number field k. Let n: E — > U be an elliptic curve where U is a non-empty open 
subvaricty of P£ (recall this means that 7r is a proper smooth morphism whose fibers are geometrically 
connected curves of genus 1, together with a section O of tt). For each point u £ U(k), the fiber of ir over u 
is an elliptic curve E u over k. Let r\ be the generic point of U ; the generic fiber E^ is an elliptic curve over 
the function field k(U). 

Fix a geometric generic point fj of £7 (equivalently, fix an algebraic closure k(U) of k(U)). For each positive 
integer m, let E[m] be the m-torsion subscheme of E. The morphism E[m] — >• J7 is finite etale and as a lisse 
sheaf corresponds to a (Z/mZ)-representation of wi(U,rj) on the geometric generic fiber E[m]fj — E^\m\. We 
thus have a continuous homomorphism 

pE,m- Ki(U,rj) -> Aut(£7[m]^) = GL 2 (Z/mZ) 
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which is uniquely defined up to an inner automorphism. Let H E ijn) be the image under p E ,m of 7Ti([7, n). 
Combining all our representations together, we obtain a single continuous homomorphism 

PE : iri(U,ffi -+GL 2 (Z). 

Let He be the image under pe of the groups it\(U, rj). 

There is a unique morphism j : U —t Ai such that j(u) is the j-invariant of E u for all u £ U(k). Assume 
that E — > U is non-isotrivial; i.e., j : t/ — > Aj. is non-constant (equivalently, the j-invariant of E v does not 
belong to k). 

In §1.3, we started with an elliptic curve over k{T\, . . . ,T n ), which to avoid confusion we will call E. 
Choosing a specific model, we described a closed subvariety Z of A£ := Specfc[Ti, . . . ,T n ] (whose fc-points 
we denoted by f2) such that specializing our model at any fc-point t of U := AJ? — Z gave an elliptic curve. 
This describes an elliptic curve E over U whose generic fiber is the original E. Theorems 1.14 and 1.15 are 
thus equivalent to: 

Theorem 7.1. Fix notation as above. 
(i) Ifk^Q, then 

\{u £ U(k) : H(u) < B, p Eu (Gal(fc/fc)) = H E }\ 



\{u £ U{k) : H{u) < B}\ 
\{u e U{k) n Ol : \u\ < B, p g „(Gal(fc/fc)) = H E }\ 
\{u G U{k) nOJ! : H| < B}| 

(ii) If k = Q, iften /or any e > we /ia?;e 



= l + 0(B- 1/2 \ogB) and 
= l + 0{B- 1 ' 2 \ogB). 



\{t e U(Q) : g(t) < [He ■ gg« (Gal(Q/Q))] = rjj 1/2+ 
| {ieQn:ff(t) < B} | =1 + 0(B ) and 

|{t € U(Q) HZ" : |fj < B, [Kg : p gt (Gal(Q/Q))] = r}\ nm -i/2 +e] 
\{t £ Z n : \\t\\ < B}\ y + vyn 

where r is the index of [He, He] in He H SL2(Z). 
T/ie implicit constants depend on E — > [/ and fc, and a/so £ in (lij. 

We claim that it suffices to prove parts (i) and (ii) of Theorem 7.1 only in the integral points case; we 
explain for part (i) only. As in §6.2, we define a morphism /: A^ +1 — s- PJJ by (x , . . . , x n ) M- [xq, . . . , x n \. 
Without loss of generality, we may assume that U lies in the image of /. Let U' be the inverse image 
of U under /; it is a non-empty open subvariety of A)! +1 . Base extension gives an elliptic curve E' := 
E Xjj U' — > U' . Composing the homomorphism 7Ti (£/"') — > m(U) coming from / with the representation 
Pe ■ 7Ti(U) —> GL 2 (Z) gives pE' ■ m(U') — > GL 2 (Z) (at least up to conjugation since we are suppressed base 
points everywhere). For each v! £ U'(k), the curves E' u , and Ef( u i) are isomorphic and pe 1 , (Gal(fc/fc)) = He' 
if and only if Pe S{uI) (Gal(fc/fc)) = He- Proposition 6.1 implies that 

\{u £ U(k) : H(u) < B, p Eu (Gal(k/k)) ^ H E }\ 

<\{u' £ U'(k)nO r > +1 : H||<CoB, p Eu ,{Gal(k/k))^H E >}\ 

and the integral case of Theorem 7. 1 (i) then says that this is 0(ij[ fc:l( 2]( n + 1 ) ■ B~ x / 2 log\B) as required. 

For the rest of §7, we shall thus focus on the integral points setting. We will assume that U is an open 
subvariety of A£. 

7.2. Surjectivity modulo primes. We first consider the Galois actions on the m-torsion points for a fixed 
m. The following is an explicit form of HIT in this context; it is of the utmost importance for our application 
that the implicit constants in part (ii) do not depend on m = t. 

Proposition 7.2. 



(i) For any positive integer m, we have 

\{u G U(k) n Ol : \\u\\ < B, p E ^ n (G&\(k/k)) jk U E {m)}\ « s , m B IMll(»-i/2) logB. 

(ii) For every prime £ > 17 ; we have 

\{u G C/(fc) n 0£ : |u| < B, p Bu , f (Gal(fc/fc)) 2 SL 2 (Z/ffl)}| < £ ^ jB [fe:Q]( n -i/2+o(i/^)) logfi 
where the implicit constants do not depend on £ or B. 

Before proving the proposition, we state the following criterion for a subgroup of GL 2 (F^) to contain 
SL 2 (F,). 

Lemma 7.3. Let I > 5 be a prime. 

• Let C\(i) be the set of A G GL 2 (Ff) /or which tr(A) 2 — 4det(A) is a non-zero square in We, and such 
that tr(A) ^ 0. 

• Lei C 2 (^) be the set of A G GL 2 (Ff) /or which tr(A) 2 — 4det(A) is not a square in We, and such that 
tr(A) ^ 0. 

• Let Cs(£) be the set of A G GL 2 (F^) suc/i i/ia£ ii = tr(A) 2 / det(A) is not 0,1,2 or 4, and such that 
u 2 - 3n + 1 ^ 0. 

(i) If G is a subgroup of GL 2 (F^) i/iai contains elements from all three of the sets Ci(i), C2(£) and 
Cs(£), then G contains SLi2(F^). 

(ii) For each d G F^ , we have 

\{A e d(£) : dct(A) = 4| _ f | + 0(1/1) fori = 1,2, 
|SLa(Fi)| [1 + 0(1//) fori = 3. 

Proof. Part (i) is Proposition 19 of [Ser72]. We now consider part (ii) with a fixed d G F^. For each t G F^, 
[CFM05, Lemma 2.7] shows that 

\{A e GL 2 (We) : det(A) = d, tr(A) = t}\ = £ 2 + e£ where e = ~ 4 ^ ) G {-1,0,1}. 
Hence for each c€F|, 

|{4 G GL 2 (F^) : det(A) = d, ti(A) 2 /d = c}\ < 2£(£ + 1). 

This implies the bound for Cz(£) and taking c = 4 shows that we need only prove the bound for Ci(£) or 
C 2 (£). We have 

\{A G Ci(£) : dct(A) = d}\ = £ 2 \{t G W e : i 2 - 4d is a square in F £ }| + 0(£ 2 ) 

= ^ 2 ' \{(t,y) G F 2 : t 2 - y 2 = 4d}| + 0(^ 2 ). 

Since d 7^ and £ is odd, the plane curve t 2 — y 2 = Ad in A| = SpecF^[i,y] is isomorphic to F^ e with two 
F^-rational points removed. Therefore, \{A G Ci(£) : det(A) = d}\ = \£ 2 {l - 1) + 0(£ 2 ) = \£ z + 0(£ 2 ). □ 

Proof of Proposition 7.2. (i) This follows from the large sieve bounds in Theorem 1.2. 

(ii) We first extend the elliptic curve it : E — s- U to an integral model. There is a finite set S C , an open 
subscheme U of Aq over the ring O of 5-integers, and an elliptic curve £ — > U such that the generic fibers 
of £ and U arc E and U, respectively, and tt: E —> U is the morphism on generic fibers of £ — >• U. 

Now fix a prime £ > 17. The representation /?e^: 7Ti(C/) — > GL 2 (Z/ffl) factors through a Galois repre- 
sentation 

7Tl(W J GL 2 (Z/£Z) 

where 0£ is the ring of Sf-integers with Si := S'Ujp G : p|€}; note that the torsion subscheme £o e [£} -> Uot 
is finite etale. 
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Let ~H E (£) denote the image under p E ^ of ■Ki{U^,rf) 1 and assume that H E (£) = SL 2 (Z/£Z). Let Ci(£), 
C 2 (£) and Cs(£) be the sets defined in Lemma 7.3. By Lemma 7.3(i), we have 

|{« g U(k) n Ol : \u\ < B, PEu j{G&\{k/k)) 2 SL 2 (Z/ffl)}| 

3 

<^\{ue U{k)C\Ol : HI < B, PEu .i{GaX{k/k)) C GL 2 (Z/.ffl) - d{f)}\. 

i=l 

By Theorem 2.1, 

|{« G I7(ft) n £>£ : H < B, p Eu ,e(Gal(k/k)) 2 SL 2 (Z/ffl)}| <£/ Cj Bl fe: Q] logB 

where 

c:=|SL 2 (Z/«)|W £ 



deg(p)=l and JV(p)>| SL 2 

and 

\{A G GL 2 (Z/<?Z) - d(£) : det(A) = d}\ 



max 



i=l,2,3 |SL 2 (Z/ffl)| 
dedet(H E W) 

We obtain the desired bound by noting that 6 = i + 0{\/£) from Lemma 7.3(h) and that c is less than 

^ex P (E peS ^)«^ 6 . 

It thus remains to show that TL 9 E (£) = SL 2 (Z/£Z) for every prime £ > 17. After choosing an embedding 
k C, we have H E (£) = pE,t(^i(Uc))- Let X(£) be the modular curve over C which classifies elliptic curves 
with a basis for the ^-torsion. There is a natural action of SL 2 (Z/£Z) on X(£) and the quotient gives a 
morphism X(£) — > X(l) where X(l) = Pj. is the j-line. Now consider the quotient curve X E := X (£) /H E (£) 
and the natural morphism /: We — > X(l). There is a morphism h: Uc — > X E such that the j-invariant of 
E u is f(h(u)) for all u G t/(C). The morphism foh, and hence /i, is non-constant by our ongoing assumption 
that the j-invariant of E is non-constant. Since Uc is open in and h is dominant, we deduce that X E 
has genus 0. For £ > 17, there are no proper subgroups H of SL 2 (Z/£Z) for which X(£)/H has genus (it 
suffices to compute the genus of X(£)/H for the for maximal subgroups H of SL 2 (Z/^Z), see [CH05, Table 
2.1]). □ 

The following effective version of Serre's open image theorem, due to Masser and Wiistholz, allows us to 
effectively bound the primes £ that have to be considered. 

Theorem 7.4 (Masser- Wiistholz [MW93]). There are absolute constants c > and 7 > with the following 
properties. Suppose E is an elliptic curve of Weil height 1 h defined over a number field k of degree d, and 
assume E has no complex multiplication over k. If £ > c(max{d,/i}) 7 , then pE,e{Gal(k/k)) D SL 2 (Z/-ffl). 

Combining Masser and Wiistholz's theorem with our explicit HIT bounds gives the following proposition. 

Proposition 7.5. For every e > 0, we have 

\{u G U(k) n Ol : H < B, PEu A Gal (k/k)) 2 SL 2 (Z/IZ) for all £ > 17}| _ / 1 \ 

\{u£ U{k)nO% : H < B}\ ~ + ° Ee \Bl k -®y 2 -c)' 

Proof. Recall that there is a morphism Je'U — > such that for each u G U(k), the j-invariant of E u is 
]e{u). Now take any u G U{k) n £>£ with H|| < B. We have 

\ogH{j{E u )) = logH(j E {u)) « logfT(u) « log ||u|| < logB 

where the implicit constants do not depend on u G U(k) D So by Theorem 7.4 if E u is non-CM, then 
PE u ,e (Gal(fc/fc)) D SL 2 (Z/£Z) for all £ > C(log_B) 7 where 7 > is an absolute constant and C is a constant 
that depends on E and k. Therefore, 

|{u G U{k) n £>£ : HI < B, p Eu ,e(Gal(k/k)) 2 SL 2 (Z/ffl) for some € > 17}| 
< Yl \{ ue L/ ( fc ) n °k : M ^ B ' /°£^(Gal(£/fc)) 2 SL 2 (Z/fZ)}| 

17<^<C(logB)T 



i.e., the absolute logarithmic height of the j-invariant of E 
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(note that if E u has complex multiplication then pE u ,i(Gal(k/k)) 2 SL2(Z/£Z) for all £ > 17). By Theo- 
rem 7.2, 

(7.1) \{u e J7(fc) n Ol : \\u\\ < B, p En/ (Gal(k/k)) 2 SL 2 (Z/£Z) for some £ > 17}\ 

< B)£ £ £ 6 B[ fe: «"-l/2+e) logB . 

17<C<C(logB)T 

We have used part (ii) of Theorem 7.2 for all sufficiently large £ (how large depends on e but not on B) and 
Theorem 7.2(i) is used for the finitely many excluded primes. So (7.1) is o(#[fc:Q](™-i/2+e) (i og B)^ +1 ), and 
the proposition follows from (1.1) and a readjustment of e. □ 

The following group theoretic lemma justifies our focus on the Galois images arising from £-torsion. We 
will apply it later with H equal to [He , He] ■ 

Lemma 7.6. Let H be an open subgroup o/SL2(Z), and let G be a closed subgroup ofTL. For each positive 
integer m, let TL(m) and G{m) be the images under the reduction modulo m map SL2(Z) — > SL2(Z/mZ) of 
H and G, respectively. Then there exists a positive integer M (divisible only by those primes £ for which 
U{£) ^ SL 2 (Z/£Z) or £ < 5) such that G = H if and only if G(M) = H(M) and G{£) = SL 2 (Z/£Z) for all 
primes £ \ M . 

Proof. Let H m and G m be the image of H and G, respectively, in Yie\m SL 2 (Z^). 

Let Mq be a positive integer divisible by 2, 3, 5 and by the primes for which H{£) ^ SL2(Z/£Z). The 
Frattini subgroup <&(Hm ) of Hm is the intersection of the maximal closed subgroups of Hm - Since H 
is open in SL2(Z), the group Hm contains a normal and open subgroup of the form n^iA/o f° r some 

e(£) > 1, where S t<t) := {A G SL 2 (Z f ) : A = I (mod £ e ^)} . The groups {A G SL 2 (Z £ ) : A = I (mod t^)} 
are pro-£ and are finitely generated as topological groups. Therefore by [Ser97, 10.6 Prop.], &{Hm q ) is an 
open normal subgroup of Hm ■ Choose a positive integer M with the same prime divisors as Mq such that 
$(7i Mo ) 2 n^||A/ 5 ^; this wiU be our desired M. Observe that if G(M) = H(M), then G M = H M - 

Consider a prime £ \ Mq. By [Ser97, IV-23 Lemma 3], the assumption G{£) = H(£) = SL2(Z/£Z) implies 
that G e = H e = SL 2 (Z f ). 

We may view G and H as subgroups of Hm x EI^m SL 2 (Z£). We have seen that the projection of G onto 
the Hm and SL2(Z^) factors is surjective. We now show that these factors have no common non-abelian 
simple groups in their composition series. For £ \ M (in particular £ > 5), the only non-abelian simple 
group occurring in a composition series of SI^Z^) is SL2(F£)/{±/}. Also SL2(Z^) with £ > 5 has no non- 
trivial abelian quotients (cf. [ZywlO, Lemma A.l]). None of the groups SL 2 (F^)/{±/} (£ \ M) occur in 
a composition series of Hm (this follows from the calculation of "Occ(SL2(Zf))" in [Ser98, IV-25]). Using 
Goursat's lemma, we deduce the equality G — Hm x n^M^^ 2 (Z^) (for example, see [ZywlO, Lemma A. 4] 
where it is stated only for finite groups but it immediately extends to profinite groups) ; since H lies between 
these two groups, we deduce that G = H. □ 

7.3. Abelian quotients and cyclotomic fields. We now state a special version of HIT involving the 
cyclotomic extension of k. We will need this proposition in future work, so we also include a rational point 
version. 

Proposition 7.7. Let k be any number field except Q. Fix a non-empty open subvariety U of P£ and a 
surjective continuous homomorphism p: nx(U) — > G where G is a finite abelian group. Let G c be the image 
of 7Ti(C/fccyc) under p. For each u G U(k), let p u be the composition Gal(fc/fc) = 7Ti(Specfc) iri(U) A- G. 
Then 

\{u G U(k) : H(u) < B, p u (Ga\(k/k c y c )) = G c }\ /logg\ 
\{u€U(k) : H(u) < B}\ KB 1 / 2 )' 
Assume further that U is an open subvariety of AjJ. Then 

\{u G U(k) n Ol : H < B, p u {Ga\{k/k^)) = G c }\ /logi?\ 
\{uGU(k)nO% : \\u\\ <B}\ + KB 1 / 2 )' 

The implicit constants do not depend on B. 
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Since Q cyc is the maximal abelian extension of Q, Proposition 7.7 fails for k = Q and G c ^ 1. The proof 
of the proposition is based on the following simple lemma. Since we are working with an abelian group G, 
the Frobenius conjugacy classes are actually well-defined elements. 

Lemma 7.8. Let p be a rational prime that splits completely in k and let L be a finite abelian extension 
of Q that is unramified at p. Choose any prime p of Ok lying over p. Then the automorphism (p,Lk/k) £ 
Gal(Lfc/fc) does not depend on the choice of p dividing p. 

Proof. Our assumptions assure that p is unramified in Lk. Restriction to L defines an injective homomor- 
phism Gal(Lfc/fc) ^ Gal(L/Q). We claim that (p, Lk/k)\^ = (p,L/Q) from which the lemma would follow 
immediately. Define a := (p, Lk/k) and fix a prime *P of O^k lying over p. Then cr(^p) = and a induces 
the p-th power Frobenius automorphism on Ftp (since p = N(p)). The restriction o~\l stabilizes the prime 
p' := *P n Ol of Ol and induces the p-th. power Frobenius automorphism on F p <. Therefore, ct|l = (p, L/Q) 
as claimed. □ 

Proof of Proposition 7.7. A similar argument to that in §6.2 shows that the rational point version is a 
consequence of the integral point version, so we need only prove the second statement. Set d = [k : Q]. As 
usual, define G 9 = p(iri(U^)). If G g = 1, then the proposition is easy (p factors through Gal(fc/fc) and equals 
p u for each u £ U(k)). So we may assume that G 9 ^ 1. Since G 9 C G c , this also implies that G c / 1. 

For a fixed u £ U(k) n 0]?, we certainly have p„(Gal(fc/fc cyc )) C G c . If this is not an equality, then 
p u (Gal(k / k cyc )) = 1 where p is the representation ni(U) A G -» G/i? for some proper subgroup of G c . 
Thus by (1.1) it suffices to show that 

|{« £ U(k)nO r k l : \\u\\ < B, p u (Gal(fc/fc cyc )) = 1}| < B^ 1 ' 2 log B. 

Define the set 

A = {u £ U(k) n Ol : H < B, Pu (G&\(k/k cyc )) = 1} 

for a fixed real number B > 2. Choose an open subscheme U of Ag, fc with generic fiber U. Fix a finite set 
S C Efc for which p factors through a homomorphism miLio) — > G, which we shall also denote by p, where 
O is the ring of S'-integers in k. 

There is a finite Galois extension K/Q such that K D k and p(tti(Uk)) — G 9 . Fix a prime p that splits 
completely in K and is not divisible by any prime in S. Then for a prime p of Ok dividing p and an element 
G £ G 9 , we have 

|{u e W(F P ) : p(Frob„) = G}| = r^-Mp) n + 0(iV(p)"- 1 /2), 

where the implicit constant depends on p and K (this follows from Deligne's theorem and the bounds in 
[Bom78]). Let pi, . . . , pd be the primes of Ok dividing p. Define the sets 

d 

Bp = . . . ,Ud) £ JJW(F Pi ) : p(Frob Ui ) £ G 9 is independent of ij 

i=l 

and C p = (nf=i F p») \ (nf=i"( F Pl ))- Wc then have |G p | = O^™" 1 ) and 

|S P | - |G«| (^p» + Ob- 1 / 2 ))" = |^zi/ n + O^- 1 ' 2 ) 

(we have used that N(pi) = p since p splits completely in k). So using our assumption that d > 1 (i.e., 
fc / Q) and G 9 / 1, we find that \B p U C p \ < \p dn + O^™" 1 / 2 ). 

Take any u£i. The Chinese remainder theorem gives an isomorphism 

d d 

(7-2) OUpOl = H(Ok/p t Ok) n =U ¥ l> 

i=l i=l 

so wc may identify it (mod p) with the tuple (iti, . . . , u<j) G Ilf=i F p\- Suppose it (mod p) does not belong 
to Cp, i.e., Ui £ U(¥p i ) for all i. Then p u is unramified at each p^ and p u {¥voh Pi ) = p(Frob Mi ). The 
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condition p u (G&\(k / k cyc )) = 1 implies that there is a finite cyclotomic extension L/Q unramified at p such 
that p u (Ga\(k / Lk)) = 1. By Lemma 7.8, we deduce that 

jo(Frob Ml ) = p M (Frob Pi ) = p u (Frob Pj ) = p{¥mb Uj ) 

for all i, j G {1, . . . , d}. So using the isomorphism (7.2), we find that image of A modulo p lies in B p U C p 
and hence has cardinality at most ^p dn + 0{p dn ~ 1 / 2 ). 

We can now apply the large sieve to obtain a bound for A. Using the large sieve as in [Ser97, 12.1] (with 
K = Q, A = Oj? with norm ||-||, and Q = B 1 / 2 ) gives the bound 

\A\ < B nd /L 

where L = ~^2 p<B i/2 pe -p(l + 0(p~ 1//2 )) and V is the set of primes p that are completely split in K and are 
not divisible by any primes in S. Since V has positive density, we have L 3> B 1 / 2 / \og{B 1 / 2 ) for sufficiently 
large B. Therefore, |.4| < gnd-i/2 \ Q gfi □ 

7.4. Final steps. 

Proposition 7.9. 

(i) For any e > 0, 

\{ue U(k)nO% : \\u\\ < B, p £u (Gal(fc/fc ab )) = [H E ,H E ]}\ , „ ( 1 

= 1 + L>E,e\ 



\{u G U(k)nO% : |tt| < B}\ *"*\ B [k:Q]/2- 
(ii) Ifk^Q, then 

\{u G E/(fc) n Q£ : < B, p Eu (Gs.Kk/k^ c )) = H E n SL 2 (Z)}| _ / log B \ 

|{ue[/(A:)nOj»:||u|<S}| ~ 1 + HljVV' 

Proof. For u G f/(fc)> the commutator of /?E u (Gal(fc/fc)) is p Eu (Gal(/c/fc ab )). Since p^„(Gal(fc/fc)) C we 
find that p Bu (Gal(A:/fc ab )) is a closed subgroup of [H E , H E \. Since [H E ,H E ] is an open subgroup of SL 2 (Z), 
there is a corresponding integer M as in Lemma 7.6; we may assume M is divisible by all primes £ < 17. 
With this choice of M, 

\{u G U{k)C\Ol : H < B, P£u (Gal(fc/fc ab )) ^ [Hg,H g ]}| 

|{uG [/(fc)nO^ : H <B}\ 
\{u G £7(fc) DO]? : HI < B,p £u , M (Gal(fc/fc ab )) ^ [tt B (M), «b(M)]}| 



(7.3) 

(7.4) + 



|{u G U(k)nO% : \\u\\ < B}\ 
\{u£U{k)nO% : H < B,p gu , £ (Gal(fc/fc ab )) ^ SL 2 (Z/IZ) for somelt^}! 
|{mG [/(fc)n^ : H| <B}\ 



Up Eu , M (Gal(k/k)) = n E {M),t\ven p EuM {Ga\{k/k ah )) = [H E (M),H E (M)}. Thus (7.3) is 0(B-^/ 2 logfl) 
by Proposition 7.2. For I \ M (and in particular, ^ > 5), the group SL 2 (Z/£Z) is its own commutator 
subgroup, so p Eu ^{G&\(k/k ah )) = SL 2 (Z/ffl) if and only if p Euit (Gal(k/k)) D SL 2 (Z/ffl). Thus by Propo- 
sition 7.5, the term (7.4) is 0(B~ [k:(l]/2+e ). Part (i) follows immediately. 

We now consider (ii), so take k ^ Q. Define the group G = TL E (~l SL 2 (Z). The representation detop B 
factors through the cyclotomic character Gal(fc/fc) — )• Z x , so p E (Uk"y) = G and p Eu (Gal(k / k cyc )) is a closed 
subgroup of G for all u G C/(fc). 

The group [He, He] is a normal subgroup of finite index in G, so there is an integer m such that reduction 
modulo m gives an isomorphism 

G/[He,H e ] ^ G(m)/[H E (m),H E (m)]. 

Define p: tt\{U) H E (m)/[H E (m),H E (rn)] to be the composition of pE,m with the obvious quotient 
map. The image of 7ri(J7fcc y c) under p is G c := G(m)/[H E (rri), H E {m)]. For each u G J7(/c), let p u be the 
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composition of pE u ,m with the quotient map Hsijn) -» "He (to)/ (to) , %s(m)]. By Proposition 7.7 and 
our assumption k ^ Q, we have 

Km £ C/(fc) n O n k : |uj < B, p M (Gal(fc/fc^)) = / logi?x 

{ ' \{u G f/(fc) n 0£ : |u| < B}\ \BV*)' 

IfforwG U(k)n0^wehavep Eu (Ga\(k/k ab )) = [He, He] andp u (Gal(fc/A; cyc )) = G c , then p Eu (Gal(k/k c y c )) 
equals G = H E n SL 2 (Z). So (ii) follows from (i) and (7.5). □ 

Proof of Theorem 7.1. As remarked in the comments following the statement of Theorem 7.1, it suffices to 
prove the integral point versions. 

Since detop^: tvi(U) — > Z x factors through the cyclotomic character Gal(fc/fc) — >• Z x , we find that 

[He : PE u (Gal(k/k))] = [H E n SL 2 (Z) : p Eu (Gal(£/fc cyc ))] 

for all u G f/(fc). If A; 7^ Q, then the integral point version of Theorem 7. 1 (i) is equivalent to Theorem 7.9(h). 
Now suppose k = Q. By the Kronecker- Weber theorem Q ab = Q cyc , so p Eu (Gal((Q)/(Q> ab )) C [He, He] for all 
u e U(Q). Thus 

[He : PE u (Gal(®/®))] = [He D SL 2 (Z) : p £u (Gal(Q/Q ab ))] 

= [H s nSL 2 (Z) : [He, He]] ■ [[He, He] : p £u (Gal(Q/Q ab ))] 

= r • [[He, He] ■ Pe u (Gal(Q/Q ab ))] . 

The integral point version of Theorem 7.1(h) follows from Theorem 7.9(i) □ 
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